Product
Security update available for InDesign
Release date: December 13, 2016
Vulnerability identifier: APSB16-43
Priority: 3
CVE number: CVE-2016-7886
Platform: Windows and Macintosh
Summary
Adobe has released security updates for InDesign for Windows and Macintosh. These updates resolve a critical memory corruption vulnerability.
Affected versions
|
Affected version |
Platform |
InDesign |
11.4.1 and earlier versions |
Windows and Macintosh |
InDesign Server |
11.0.0 and earlier versions |
Windows and Macintosh |
Solution
Adobe categorizes these updates with the following priority rating and recommends users update their installation to the newest version:
Product |
Updated version |
Platform |
Priority rating |
Availability |
InDesign |
12.0.0 |
Windows and Macintosh |
3 |
|
InDesign Server |
12.0.0 |
Windows and Macintosh |
3 |
For managed environments, IT administrators can use the Creative Cloud Packager to create deployment packages. Refer to this help page for more information.
Vulnerability Details
This update resolves a critical memory corruption vulnerability (CVE-2016-7886).
Acknowledgments
Adobe would like to thank Fortinet's FortiGuard Labs for reporting this issue (CVE-2016-7886) and for working with Adobe to help protect our customers.